here in the last 3 lines of the (NULL) file... Feb 21 15:53:56 floyd/floyd sshd[12597]: Accepted password for red from 209.144.112.109 port 1050 Feb 21 15:54:01 floyd/floyd su[12608]: + pts/2 red-root Feb 21 16:00:07 floyd/floyd ntpdate[12633]: adjust time server 209.144.112.3 offset 0.094803 sec Chris Scheller System/Network Administration Network One Internet, inc. http://www.networkone.net/ 1.888.GOT-NET1 On Mon, 21 Feb 2000, Balazs Scheidler wrote:
On Mon, Feb 21, 2000 at 11:34:25AM -0800, Chris Scheller wrote:
There is no specific message which triggers it. I was just going through the last few days of logs and it appears that any syslog message coming remotely doesn't get processed via the $PROGRAM macro. example; pppd,named,chat,ntpdate,sshd all get logged into the file (NULL). However messages coming from remote host get the $FACILITY macro applied correctly. Do you want to see my logs? My conf? What else would you like to see so i can be more helpful?
a single message which was written to the file (NULL) would help. I tried the same locally, but $PROGRAM was expanded correctly.
-- Bazsi PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1 url: http://www.balabit.hu/pgpkey.txt
_______________________________________________ syslog-ng maillist - syslog-ng@lists.balabit.hu http://lists.balabit.hu/mailman/listinfo/syslog-ng